Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/19eacc53-e4f8-3baf-b3b6-8566cab25b67.roa
File:                     19eacc53-e4f8-3baf-b3b6-8566cab25b67.roa (raw, json)
Hash identifier:          sVD/3cFCXoh2vC0RXGHCzVJi1JN/qlWRaijDQ9nZnTU=
Subject key identifier:   57:61:82:78:81:3F:8B:EA:3A:55:F3:32:17:B7:71:76:E7:C5:B9:EB
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858459E936026491ABC98C3BE3A00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/19eacc53-e4f8-3baf-b3b6-8566cab25b67.roa
Signing time:             Sun 21 Apr 2024 13:00:35 +0000
ROA not before:           Sun 21 Apr 2024 13:00:35 +0000
ROA not after:            Sat 20 Jul 2024 13:00:35 +0000
asID:                     16509
IP address blocks:        130.137.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9e:93:60:26:49:1a:bc:98:c3:be:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Apr 21 13:00:35 2024 GMT
            Not After : Jul 20 13:00:35 2024 GMT
        Subject: CN=96e4e697-fd70-48d9-a95e-d4c71352d32e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:83:ae:09:6c:0b:b3:e3:b7:53:80:77:b9:9a:
                    08:ad:d1:a6:73:5b:e6:08:7f:db:66:35:34:a9:cc:
                    18:49:41:7d:1b:20:13:5e:2a:8b:ac:dd:92:dc:b9:
                    a6:ef:58:22:18:0b:26:03:2a:88:45:71:fc:40:51:
                    3d:5e:05:2a:43:b5:bc:fe:04:6b:84:c1:43:d9:00:
                    ec:d0:6c:8e:fd:f7:ca:cf:40:50:a7:e9:9d:24:c5:
                    fe:f6:1e:4e:e0:fd:3c:08:ae:b6:83:b3:fe:c6:ff:
                    e8:01:bb:79:e1:64:5d:55:54:9b:bb:c0:ab:20:c9:
                    f4:fa:84:c6:7c:13:9d:3d:3e:5c:2b:67:61:9f:cc:
                    3d:64:e6:3f:f1:b6:37:55:f2:44:f2:8c:6e:82:14:
                    98:92:f9:c6:4e:64:ee:5a:15:99:db:15:2d:c6:88:
                    6b:cd:13:7f:70:84:ad:55:2a:09:81:0a:01:9c:3d:
                    f4:09:f1:01:6f:0a:08:d5:00:24:52:14:3a:3a:e9:
                    a9:4b:dd:27:ef:fa:0e:04:aa:65:c7:74:a3:d6:36:
                    56:b1:11:06:c2:a4:3d:57:e5:a1:d5:20:84:89:95:
                    41:87:b0:34:6d:6a:3b:c0:2c:ba:2c:39:81:0a:ca:
                    6d:b2:7d:bb:52:40:a5:5f:e9:e1:4d:a6:2e:2f:04:
                    1b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:61:82:78:81:3F:8B:EA:3A:55:F3:32:17:B7:71:76:E7:C5:B9:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/19eacc53-e4f8-3baf-b3b6-8566cab25b67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:e2:f0:1c:4d:d0:30:f2:68:e3:f5:61:03:2f:8f:57:29:2d:
         aa:1f:ca:66:3a:aa:77:44:3f:9d:b8:60:7d:5a:2a:8d:23:6c:
         cf:04:60:8b:9f:0a:35:93:50:9d:b9:38:ff:61:3d:ad:f5:7d:
         7d:8c:c5:46:15:87:b8:6e:2b:7c:d6:2a:4a:1c:5e:3a:e8:c3:
         99:a9:68:41:8d:9e:14:b6:54:5b:30:f2:2d:57:dc:46:ec:0a:
         93:2e:91:fd:b3:81:d1:6a:58:54:06:ef:0d:c6:4c:25:d6:65:
         52:fe:8e:47:4a:6d:c8:7e:3f:7e:25:c7:8c:46:5e:28:12:10:
         75:02:7f:6c:bd:1c:92:0f:22:58:9e:b3:27:51:b6:6d:b9:6b:
         8e:95:40:2d:e2:14:83:28:87:78:62:99:22:ef:28:e8:a1:d5:
         80:f1:80:3f:f0:b4:bc:07:cc:84:d9:07:c6:d9:34:26:39:8b:
         20:e0:7f:39:73:ff:ef:e9:9b:87:21:06:35:65:eb:21:6f:56:
         55:a2:70:cf:2b:14:33:0a:5f:8c:89:25:4e:c0:8d:65:46:dc:
         80:f7:01:47:e0:5d:52:e6:bf:03:29:b0:d4:9a:01:0d:19:2f:
         1e:96:8c:26:22:dc:7e:7e:a9:51:a0:cc:a5:c1:35:81:cb:75:
         6e:8f:73:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:32:07 2024 by rpki-client on console-ams.rpki-client.org